> AI guardrails are the first and often only line of defense between a secure system and an LLM that’s been tricked into revealing secrets, generating disinformation, or executing harmful instructions. EchoGram shows that these defenses can be systematically bypassed or destabilized, even without insider access or specialized tools.

All of this is uncomfortably reminiscent of junior developers trying to "fix" SQL injection by grepping input strings... Except here the right way doesn't exist yet either.